Go 1.11.3 fixes package retrieval and certificate verification
engineeringgosecuritycertificatesThe security release restricts malicious import paths in GOPATH mode and bounds certificate-chain signature checks. Build tools and deployed programs need different responses.